.png){kind=icon}
返回
Interpretable Defense Against Structural Adversarial Attacks on Android Malware Detection
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2025.3639962.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Android, being one of the most widely used mobile systems, is facing pressing threats from malware. Despite the effectiveness of Android malware detection (AMD) systems, they are still vulnerable to state-of-the-art adversarial attacks. Existing defense methods require the knowledge of target adversaries, such as attack algorithms or obfuscation strategies, which is impractical in real-world scenarios. Additionally, these approaches may adversely affect the performance of the detection model and fail to defend against problem-space attacks, which not only deceive the detection models but also generate executable adversarial software. To address this research gap, we propose a novel interpretable Android guard system, named IADGuard, to help AMD defend against attacks. IADGuard first designs a novel graph explainable method, AGExplainer, to identify suspicious functions and invocations in adversarial malware. With the guidance of AGExplainer, IADGuard develops a rectifier to reverse adversarial modifications on apps' function invocation relations, which facilitates the detection of adversarial malware by victim AMD. It is noteworthy that IADGuard requires zero knowledge of adversarial models and victim models, thereby preserves the performance of victim AMD. We validate IADGuard over three state-of-the-art problem space attacks that modify apps' function invocation relations to deceive victim AMD. Experimental results show that IADGuard achieves over 90.5% defense success rate, i.e., helps victim AMD identify adversarial malware. Furthermore, AGExplainer surpasses representative interpreters in identifying essential modifications, helps IADGuard reduce false positives to 1.5%, and improves the detection efficiency by up to 10.4 times.
Keyword:
Malware
Training
Robustness
Feature extraction
Predictive models
Perturbation methods
Computational modeling
Adaptation models
Software algorithms
Rectifiers
Interpretable defense
adversarial attack
Android malware detection
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
.png){kind=icon}
分享收藏Do gradient-based explanations tell anything about adversarial robustness to android malware?基于梯度的解释是否能说明android恶意软件的对抗鲁棒性？
OAAI
OAAI分享收藏CFGExplainer: Explaining Graph Neural Network-Based Malware Classification from Control Flow Graphs
PREAI
分享收藏
查看更多内容